Uploaded image for project: 'Apache Airflow'
  1. Apache Airflow
  2. AIRFLOW-5562

Skip grant single DAG permissions for Admin role

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.10.3, 1.10.4, 1.10.5
    • Fix Version/s: 1.10.7
    • Component/s: security

      Description

      From AIRFLOW-2267,there is a function named update_admin_perm_view will refresh admin permission then add ALL permission to Admin role.

      But, DAG level access make each DAG a MenuView, these views will be grant to Admin role. As Admin role already have access to all_dags, these permissions actually make Admin role's permission more chaotic.

      In my project, it is hard to check permissions in webUI and actually this lead to some performance issues.

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                icyfox Liu Xuesi
                Reporter:
                icyfox Liu Xuesi
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 168h
                  168h
                  Remaining:
                  Remaining Estimate - 168h
                  168h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified